Once you have retrieved the code from the user callback, you will need to exchange it for an access token via a backend call.
The client id of the app requesting authorization.
The secret token of your app.
The code passed to your callback when the user granted access.
When generating a new token use authorization_code.
Same as the state you specified earlier.
successful operation
Number of seconds until the access_token expires. Uses epoch time.